@christiandoxa/prodex 0.186.0 → 0.188.0

package/README.md

@@ -4,7 +4,7 @@
 
 Use multiple Codex accounts and supported provider backends from one command line. OpenAI/Codex profiles get quota-aware routing and auto-rotation; provider adapters let `prodex s` launch the Codex front end against Gemini, Anthropic, Copilot, DeepSeek, and local OpenAI-compatible servers.
 
-![Prodex overview](assets/prodex-overview.png)
+![Prodex overview](https://github.com/christiandoxa/prodex/releases/download/assets/prodex-overview.png)
 
 ## Contents
 
@@ -567,8 +567,11 @@ prodex run
 prodex run --profile main
 prodex run --dry-run
 prodex exec "review this repo"
+prodex delete 019c9e3d-45a0-7ad0-a6ee-b194ac2d44f9
 ```
 
+Codex-owned TUI commands such as `/usage`, `/goal`, `/import`, and `/delete` stay upstream Codex behavior. Prodex preserves their request metadata through the proxy and does not add a competing command surface. The CLI form `prodex delete <session>` passes through to Codex and, after a successful delete, prunes matching Prodex session affinity metadata.
+
 </details>
 
 <details>
@@ -788,7 +791,7 @@ Gemini CLI compatibility helpers accept inline `gemini_memory` / `gemini_policy`
 
 Before Codex launches, the Gemini provider projects Gemini CLI settings and extension surfaces into the active `CODEX_HOME`: system/global/project `mcpServers` and extension `mcpServers` become generated Codex `[mcp_servers.gemini_*]` entries with settings taking precedence over extension servers of the same Gemini name; system/global/project and extension command hooks are merged into `hooks.json` for Codex `/hooks` review; `~/.gemini/commands`, project `.gemini/commands`, and extension `commands/*.toml` become Codex custom prompts with Gemini command aliases preserved where possible; extension `skills/*/SKILL.md` are copied into generated Codex skill folders under `.agents/skills`; and extension `agents/*.md` become generated Codex custom agents under `agents/*.toml`. Built-in `/prompts:gemini-refresh`, `/prompts:gemini-memory-show`, `/prompts:gemini-memory-refresh`, `/prompts:gemini-memory-inbox`, `/prompts:gemini-remember`, `/prompts:gemini-checkpoint-create`, `/prompts:gemini-checkpoint-restore`, `/prompts:gemini-checkpoint-export`, and `/prompts:gemini-rewind` cover reload/admin, memory, and checkpoint workflows. Generated helper scripts in `CODEX_HOME/bin` include `prodex-gemini-refresh`, `prodex-gemini-checkpoint-create`, and `prodex-gemini-checkpoint-restore`. Set `PRODEX_GEMINI_EXTENSIONS=none` or an allow-list of extension names to control extension loading, `PRODEX_GEMINI_EXTENSION_DIRS` to add extension roots, or `PRODEX_GEMINI_DISABLE_CLI_COMPAT=1` to skip the launch-time Codex surface projection.
 
-Gemini Live realtime websocket sessions translate Codex audio, transcript, text, function-call, function-result, interruption, cancellation, housekeeping, and turn-completion events to and from Gemini `BidiGenerateContent`; one Gemini auth/profile is selected before upgrade and remains fixed for the session. `PRODEX_GEMINI_LIVE_MODEL` overrides the default Live model, while `PRODEX_GEMINI_LIVE_URL` is available for a custom or test Live endpoint. `prodex doctor --runtime` recognizes provider bridge and Gemini markers such as `local_rewrite_provider_model_fallback`, `local_rewrite_gemini_quota_rotate`, `local_rewrite_gemini_invalid_stream_retry`, and `local_rewrite_gemini_live_error`.
+Gemini Live realtime websocket translation remains available for compatible callers and credentialed adapter tests, mapping Codex audio, transcript, text, function-call, function-result, interruption, cancellation, housekeeping, and turn-completion events to and from Gemini `BidiGenerateContent`; one Gemini auth/profile is selected before upgrade and remains fixed for the session. Codex 0.140.0 removed the upstream TUI voice controls, so this bridge should not be treated as a normal Codex TUI voice feature. `PRODEX_GEMINI_LIVE_MODEL` overrides the default Live model, while `PRODEX_GEMINI_LIVE_URL` is available for a custom or test Live endpoint. `prodex doctor --runtime` recognizes provider bridge and Gemini markers such as `local_rewrite_provider_model_fallback`, `local_rewrite_gemini_quota_rotate`, `local_rewrite_gemini_invalid_stream_retry`, and `local_rewrite_gemini_live_error`.
 
 Run `npm run test:gemini-schema` after changing Gemini request, response, SSE, semantic compact, exact-output, tool-schema, or Live translation. Run `PRODEX_LIVE_GEMINI=1 npm run test:gemini-live` for a credentialed end-to-end Gemini adapter smoke request; set `PRODEX_BIN` or `PRODEX_LIVE_GEMINI_MODEL` to override the binary or model. Add `PRODEX_LIVE_GEMINI_EXTENDED=1` for command-output-only, file edit, `apply_patch`, reference-repo clone/inspection, optional-tool update discipline, semantic compact, and explicit `exec resume` checks. Add `PRODEX_LIVE_GEMINI_MCP=1` and/or `PRODEX_LIVE_GEMINI_MULTIMODAL=1` when the local environment should also exercise MCP and image-input paths.
 
@@ -964,7 +967,9 @@ On Unix-like systems, this is usually:
 ~/.codex
 ```
 
-In practice, profile `history.jsonl`, `sessions`, `archived_sessions`, `config.toml`, `managed_config.toml`, `environments.toml`, plugins, skills, app-server plugin state, memory-extension state, remote-control enrollment, and Codex runtime SQLite files such as `state_*`, `goals_*`, `logs_*`, and `memories_*` link to the same Codex home that direct Codex uses.
+In practice, profile `history.jsonl`, `sessions`, `archived_sessions`, `config.toml`, `managed_config.toml`, `environments.toml`, `.credentials.json`, plugins, skills, app-server plugin state, memory-extension state, remote-control enrollment, and Codex runtime SQLite files such as `state_*`, `goals_*`, `logs_*`, and `memories_*` link to the same Codex home that direct Codex uses.
+
+Codex 0.140.0 defaults CLI auth credentials to the file store, so managed Prodex profiles continue to keep `auth.json` isolated per profile, including OpenAI, API-key, and Bedrock API-key auth JSON. MCP OAuth defaults to Codex `auto`; when it falls back to the file store, `.credentials.json` is shared with direct Codex. OS keyring-backed MCP OAuth credentials remain Codex/OS-owned and are not part of Prodex profile export bundles.
 
 Codex cloud-managed config bundle caches are identity/account scoped and remain profile-local. System-level Codex requirements and managed config files remain owned by upstream Codex and the operating system.
 

package/lib/codex-shim.cjs

@@ -8,6 +8,45 @@ const { createRequire } = require("node:module");
 
 const requireFromHere = createRequire(__filename);
 
+const PLATFORM_TARGETS = {
+  linux: {
+    x64: {
+      packageName: "@openai/codex-linux-x64",
+      targetTriple: "x86_64-unknown-linux-musl",
+      binaryFileName: "codex",
+    },
+    arm64: {
+      packageName: "@openai/codex-linux-arm64",
+      targetTriple: "aarch64-unknown-linux-musl",
+      binaryFileName: "codex",
+    },
+  },
+  darwin: {
+    x64: {
+      packageName: "@openai/codex-darwin-x64",
+      targetTriple: "x86_64-apple-darwin",
+      binaryFileName: "codex",
+    },
+    arm64: {
+      packageName: "@openai/codex-darwin-arm64",
+      targetTriple: "aarch64-apple-darwin",
+      binaryFileName: "codex",
+    },
+  },
+  win32: {
+    x64: {
+      packageName: "@openai/codex-win32-x64",
+      targetTriple: "x86_64-pc-windows-msvc",
+      binaryFileName: "codex.exe",
+    },
+    arm64: {
+      packageName: "@openai/codex-win32-arm64",
+      targetTriple: "aarch64-pc-windows-msvc",
+      binaryFileName: "codex.exe",
+    },
+  },
+};
+
 function resolveCodexBin() {
   let packageJsonPath;
   try {
@@ -32,14 +71,58 @@ function resolveCodexBin() {
   return path.resolve(path.dirname(packageJsonPath), "bin", "codex.js");
 }
 
+function explainBundledNativeCodexPermissionIssue() {
+  const platformTarget = PLATFORM_TARGETS[process.platform]?.[process.arch];
+  if (!platformTarget || process.platform === "win32") {
+    return;
+  }
+
+  let platformPackageJsonPath;
+  try {
+    platformPackageJsonPath = requireFromHere.resolve(`${platformTarget.packageName}/package.json`);
+  } catch {
+    return;
+  }
+
+  const nativeBinaryPath = path.join(
+    path.dirname(platformPackageJsonPath),
+    "vendor",
+    platformTarget.targetTriple,
+    "bin",
+    platformTarget.binaryFileName,
+  );
+  if (!fs.existsSync(nativeBinaryPath)) {
+    return;
+  }
+  try {
+    fs.accessSync(nativeBinaryPath, fs.constants.X_OK);
+  } catch {
+    process.stderr.write(
+      [
+        `Bundled Codex native binary is not executable: ${nativeBinaryPath}`,
+        "Reinstall @christiandoxa/prodex with optional dependencies enabled, or set PRODEX_CODEX_BIN to an existing Codex CLI.",
+        "",
+      ].join("\n"),
+    );
+    process.exit(126);
+  }
+}
+
 const codexBin = resolveCodexBin();
+explainBundledNativeCodexPermissionIssue();
 const child = spawn(process.execPath, [codexBin, ...process.argv.slice(2)], {
   env: process.env,
   stdio: "inherit",
 });
 
 child.on("error", (error) => {
-  process.stderr.write(`${error.message}\n`);
+  if (error && error.code === "EACCES") {
+    process.stderr.write(
+      `${error.message}\nSet PRODEX_CODEX_BIN to an existing Codex CLI or reinstall @christiandoxa/prodex.\n`,
+    );
+  } else {
+    process.stderr.write(`${error.message}\n`);
+  }
   process.exit(1);
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@christiandoxa/prodex",
-  "version": "0.186.0",
+  "version": "0.188.0",
   "description": "Safe multi-account auto-rotate for Codex CLI with isolated CODEX_HOME profiles",
   "license": "Apache-2.0",
   "bin": {
@@ -16,12 +16,12 @@
     "@openai/codex": "latest"
   },
   "optionalDependencies": {
-    "@christiandoxa/prodex-linux-x64": "0.186.0",
-    "@christiandoxa/prodex-linux-arm64": "0.186.0",
-    "@christiandoxa/prodex-darwin-x64": "0.186.0",
-    "@christiandoxa/prodex-darwin-arm64": "0.186.0",
-    "@christiandoxa/prodex-win32-x64": "0.186.0",
-    "@christiandoxa/prodex-win32-arm64": "0.186.0"
+    "@christiandoxa/prodex-linux-x64": "0.188.0",
+    "@christiandoxa/prodex-linux-arm64": "0.188.0",
+    "@christiandoxa/prodex-darwin-x64": "0.188.0",
+    "@christiandoxa/prodex-darwin-arm64": "0.188.0",
+    "@christiandoxa/prodex-win32-x64": "0.188.0",
+    "@christiandoxa/prodex-win32-arm64": "0.188.0"
   },
   "engines": {
     "node": ">=18"

package/prodex

@@ -46,6 +46,60 @@ const packageRoot = path.dirname(requireFromHere.resolve("./package.json"));
 const codexShimPath = path.join(packageRoot, "lib", "codex-shim.cjs");
 const platformPackage = PLATFORM_PACKAGES[process.platform]?.[process.arch];
 
+function candidateCommandNames(command) {
+  if (process.platform !== "win32") {
+    return [command];
+  }
+  const extensions = (process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD")
+    .split(";")
+    .filter(Boolean);
+  const lowerCommand = command.toLowerCase();
+  if (extensions.some((extension) => lowerCommand.endsWith(extension.toLowerCase()))) {
+    return [command];
+  }
+  return [command, ...extensions.map((extension) => `${command}${extension.toLowerCase()}`)];
+}
+
+function isExecutableFile(filePath) {
+  try {
+    const stats = fs.statSync(filePath);
+    if (!stats.isFile()) {
+      return false;
+    }
+    fs.accessSync(filePath, fs.constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function resolveCommandFromPath(command, pathValue) {
+  const hasPathSeparator = command.includes("/") || command.includes("\\");
+  if (path.isAbsolute(command) || hasPathSeparator) {
+    return isExecutableFile(command) ? command : null;
+  }
+
+  for (const entry of (pathValue || "").split(path.delimiter)) {
+    if (!entry) {
+      continue;
+    }
+    for (const candidateName of candidateCommandNames(command)) {
+      const candidate = path.join(entry, candidateName);
+      if (isExecutableFile(candidate)) {
+        return candidate;
+      }
+    }
+  }
+  return null;
+}
+
+function resolveExternalCodexBin() {
+  if (process.env.PRODEX_CODEX_BIN) {
+    return process.env.PRODEX_CODEX_BIN;
+  }
+  return resolveCommandFromPath("codex", process.env.PATH || "");
+}
+
 if (!platformPackage) {
   process.stderr.write(
     `Unsupported platform for @christiandoxa/prodex: ${process.platform} ${process.arch}\n`,
@@ -75,34 +129,42 @@ if (!fs.existsSync(nativeBinaryPath)) {
   process.exit(1);
 }
 
-const shimDir = fs.mkdtempSync(path.join(os.tmpdir(), "prodex-codex-"));
-const codexCmd = path.join(shimDir, "codex");
-const codexCmdWindows = path.join(shimDir, "codex.cmd");
-
-fs.writeFileSync(
-  codexCmd,
-  `#!/bin/sh\nexec node ${JSON.stringify(codexShimPath)} "$@"\n`,
-  { mode: 0o755 },
-);
-fs.writeFileSync(
-  codexCmdWindows,
-  `@echo off\r\nnode ${JSON.stringify(codexShimPath)} %*\r\n`,
-  { mode: 0o755 },
-);
-
-const cleanup = () => {
-  try {
-    fs.rmSync(shimDir, { recursive: true, force: true });
-  } catch {
-    // Best-effort cleanup only.
-  }
-};
+let cleanup = () => {};
+let codexBin = resolveExternalCodexBin();
+let childPath = process.env.PATH ?? "";
+
+if (!codexBin) {
+  const shimDir = fs.mkdtempSync(path.join(os.tmpdir(), "prodex-codex-"));
+  const codexCmd = path.join(shimDir, "codex");
+  const codexCmdWindows = path.join(shimDir, "codex.cmd");
+
+  fs.writeFileSync(
+    codexCmd,
+    `#!/bin/sh\nexec node ${JSON.stringify(codexShimPath)} "$@"\n`,
+    { mode: 0o755 },
+  );
+  fs.writeFileSync(
+    codexCmdWindows,
+    `@echo off\r\nnode ${JSON.stringify(codexShimPath)} %*\r\n`,
+    { mode: 0o755 },
+  );
+
+  childPath = `${shimDir}${path.delimiter}${childPath}`;
+  codexBin = "codex";
+  cleanup = () => {
+    try {
+      fs.rmSync(shimDir, { recursive: true, force: true });
+    } catch {
+      // Best-effort cleanup only.
+    }
+  };
+}
 
 const child = spawn(nativeBinaryPath, process.argv.slice(2), {
   env: {
     ...process.env,
-    PATH: `${shimDir}${path.delimiter}${process.env.PATH ?? ""}`,
-    PRODEX_CODEX_BIN: "codex",
+    PATH: childPath,
+    PRODEX_CODEX_BIN: codexBin,
     npm_package_name: packageJson.name,
     npm_package_version: packageJson.version,
   },